Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
L
Cross-site Scripting (XSS)
CVE-2026-8353
Affects
concrete5/concrete5
| Versions
>=9.0.0RC.1, <9.5.1
M
Cross-site Scripting (XSS)
CVE-2026-57958
Affects
inovector/mixpost
| Versions
>=0.0.0
H
Cross-site Scripting (XSS)
CVE-2026-54087
Affects
easycorp/easyadmin-bundle
| Versions
>=5.0.0, <5.0.13
M
Directory Traversal
Affects
easycorp/easyadmin-bundle
| Versions
>=4.0.0, <4.29.10
>=5.0.0, <5.0.10
H
Missing Authorization
CVE-2026-57518
Affects
pagekit/pagekit
| Versions
>=0.0.0
H
Race Condition
CVE-2026-47741
Affects
shopper/cart
| Versions
<2.8.0
H
Race Condition
CVE-2026-47741
Affects
shopper/framework
| Versions
<2.8.0
H
Arbitrary File Upload
CVE-2026-39292
Affects
hansschouten/phpagebuilder
| Versions
>=0.31.0
M
Cross-site Scripting (XSS)
CVE-2020-37256
Affects
getgrav/grav
| Versions
<1.6.30
H
Improper Handling of Unexpected Data Type
CVE-2026-47110
Affects
ueberdosis/tiptap-php
| Versions
<2.1.1
H
Open Redirect
CVE-2026-54588
Affects
poweradmin/poweradmin
| Versions
<4.2.4
>=4.3.0, <4.3.3
H
Server-side Request Forgery (SSRF)
CVE-2026-50888
Affects
koillection/koillection
| Versions
>=1.8.0
M
Authorization Bypass Through User-Controlled Key
CVE-2026-12204
Affects
shopxo/shopxo
| Versions
>=6.7.0
H
Cross-site Request Forgery (CSRF)
CVE-2026-55741
Affects
cotonti/cotonti
| Versions
>=1.0.0
M
Server-side Request Forgery (SSRF)
CVE-2026-50552
Affects
phanan/koel
| Versions
<9.7.1
H
Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-50635
Affects
limesurvey/limesurvey
| Versions
<7.0.1
H
SQL Injection
CVE-2026-50636
Affects
limesurvey/limesurvey
| Versions
<7.0.1
C
Arbitrary Code Injection
CVE-2026-52778
Affects
yeswiki/yeswiki
| Versions
<4.6.6
M
Command Injection
CVE-2026-10273
Affects
php-censor/php-censor
| Versions
>=2.1.0
M
Server-side Request Forgery (SSRF)
CVE-2026-48555
Affects
spatie/laravel-medialibrary
| Versions
<11.23.0
H
Incomplete List of Disallowed Inputs
CVE-2026-48557
Affects
spatie/laravel-medialibrary
| Versions
<11.23.0
H
Improper Authorization
CVE-2026-47740
Affects
shopper/framework
| Versions
<2.8.0
M
Directory Traversal
CVE-2026-12198
Affects
microweber/microweber
| Versions
>=2.0.0
M
Incorrect Authorization
CVE-2026-54244
Affects
statamic/cms
| Versions
<5.74.0
>=6.0.0, <6.20.3
L
Server-side Request Forgery (SSRF)
CVE-2026-54242
Affects
statamic/cms
| Versions
<5.73.24
>=6.0.0, <6.20.1
M
CSV Injection
CVE-2026-54243
Affects
statamic/cms
| Versions
<5.73.24
>=6.0.0, <6.20.1
M
Incorrect Authorization
CVE-2026-49288
Affects
statamic/cms
| Versions
<5.73.23
>=6.0.0, <6.20.0
L
Server-side Request Forgery (SSRF)
CVE-2026-49262
Affects
aimeos/pagible
| Versions
<0.10.4
H
Unlock of a Resource that is not Locked
CVE-2026-56396
Affects
thorsten/phpmyfaq
| Versions
<4.1.4
H
Unlock of a Resource that is not Locked
CVE-2026-56396
Affects
phpmyfaq/phpmyfaq
| Versions
<4.1.4